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1. 0 INTRODUCTION 

The advent of the Space Shuttle program has resulted in a considerable amount 
of new thinking on the subject of redundant electro-hydraulic servo-actuators. 
Probably the most critical applications on the Space Shuttle , from a reliability 
standpoint, are the primary aerodynamic control surfaces. Because of the 
massive structural loads involved, it is imperative that a high degree of force 
sharing be maintained between multiple actuators driving a common surface. 

Under the sponsor ship of NASA's George C. Marshall Space Flight Center, 

Moo g has conducted a sudy of the force-sharing problem in high-power 
parallel actuators. The cognizant technical group at Marshall was the Control 
Mechanisms Branch of the Guidance and Control Division of the Astrionics 
Laboratory. Paul Golley was the NASA Progect Engineer. Although the 
program was necessarily slanted toward the Space Shuttle, it was desired that 
the study be conducted in such a manner that the results would be as generally 
applicable as possible. 

The first step in the study was to examine the various existing force -sharing 
schemes by conducting a literature survey (Section 3. 0). A list of potentially 
applicable concepts was compiled from this survey, and schemes previously 
developed at Moog were added to it. A brief analysis was then made of each 
concept, which resulted in two competing schemes being selected for in-depth 
evaluation. Next, a functional design of the equalization logic for the two 
schemes was undertaken (Section 4. 0). Then a specific Space Shuttle appli- 
cation was chosen for experimental evaluation (Section 5. 0). This application 
was scaled down so that existing hardware could be utilized. Next, an analog 
computer study was conducted to evaluate the more important characteristics 
of the two competing force-sharing schemes (Section 6. 0). On the basis of 
the computer study, a final configuration was selected. A load simulator was 
then designed to evaluate this configuration on actual hardware (Section 7. 0). 

Following the body of the report are two appendices, which contain detailed 
information not essential to understanding the basic force-sharing study. 
Appendix A discusses the problems of closing high-gain pressure-feedback 
loops. Appendix B contains operating instructions for the simulator. The 
simulator itself will be shipped to NASA for further evaluations. 

One paTting remark is in order. This report represents a reasonably thorough 
documentation of the entire force-sharing program. For the reader who is not 
interested in all the gory details of how the final force-sharing configuration 
evolved, it is probably sufficient to first read through Section 4. Then, recog- 
nizing that the final configuration employs the mid-value equalization (MVE) 
concept, proceed directly to Section 7 and 8 for the final results. Refer to 
Subsection 5. 1 for symbols and definitions, as needed, and to 5. 3 for the scaled 
system parameters used on the simulator. 
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2, 0 DEFINITION OF THE PROBLEM 

The ultimate in redundant electrohydraulic servo-actuators is to have 
multiple channels which are completely separate from each other, electrically* 
hydraulically, and mechanically. However, to ensure good positioning accu- 
racy under load,it is necessary to maintain high static stiffness within each 
channel. This creates the kind of problem illustrated in Figure 2. 1. 



LOAD 

POSITION 

ERROR 


FIGURE 2. 1 LOAD DRIVE FORCE vs POSITION ERROR 

—PARALLEL POSITION SERVOS ~ 


This figure shows the actuator force output of two parallel position servos as 
functions of load position error. The load position error is the difference 
between the average position command signal and the actual load position. 
When a position error exists, each servovalve develops a differential pres- 
sure across the piston to move the load and zero the error. But in general, 
some mismatch will exist in the null between the channels. This could be 
due to such things as mismatched electrical command signals, mismatched 
feedback signals, or null shifts in the servovalves themselves. Figure 2. 1 
shows that any significant null difference causes the servos to be hard over 
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Another disadvantage of self-equalization is that the actuator pistons must 
be oversized so that the equalization threshold can be set substantially above 
the load pressures required to handle the maximum anticipated load forces. 
The major problems of self-equalization can be overcome by employing a 
multi- channel secondary actuator package, whose output drives a shaft which 
is then used to position the power spools on the main rams. (Of course, is 
could be considered to be a form of cross equalization. ) The power spools 
can then be mechanically adjusted to achieve synchronization of the multiple 
rams. The self-equalization provides good positioning accuracy at the 
secondary actuator output, and the force fight which occurs at this point 
involves relatively small forces. A recent application of this principal is 
on the ill-fated Boeing SST.^Secfion 6.8 of Reference 1, References 2 and 3, 
and Section 4. 4. 2. 1 of Reference 4). Some of the more obvious advantages 
and disadvantages of this scheme are: 


Advantages: 

• Reliability should be excellent because the channels can be 
completely independent, except for the synchronizer shaft 
connecting the power spools. 

• Since all the rams remain active as channels are shut down, 
full force output capability is maintained (assuming that a 
failure has not occurred in the power stage itself). 

Disadvantages: 

• The apparent reliability of the scheme is realized only if it 
can be assumed that the probability of a mechanical failure 
in the synchronizer shaft or power spools is negligible. For 
example, all redundancy is lost if the shaft jams. 

• There is little flexibility in the physical placement of the 
channels; they must be close together. 

• The scheme is complex, both hydraulically and mechanically. 

• Substantial reduction of force-fight by mechanical adjustment 
of the power spools is difficult. On the SST, it was also 
necessary to reduce the overall output stiffness of the actua- 
tors; and even then, the degree of force sharing actually 
achieved was apparently only about 70%. 


PRECEDING Page 


BLANK not FIUfflD 
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For the Space Shuttle, it would be desirable to achieve a higher degree of 
force sharing than seems practical with the secondary actuator scheme. 

It would also be useful to retain more flexibility in the physical placement 
of the channels and to reduce complexity. In addition, there is no need to 
mix in mechanical inputs on the Space Shuttle, because it is completely 
fly-by-wire. With these considerations in mind, it was decided that the 
basic groundrules for the subject program would be as follows: 

• The main rams would be directly controlled by electrohydraulic 
servovalves - no secondary actuators. 

• Active cross equalization would be used to achieve a high 
degree of force sharing (95%), without degrading output stiff- 
ness. 

• The equalization would be mechanized electronically - no 
interchannel mechanical or hydraulic connections. 

• An additional requirement for dual-fail-operate (DFO) 
capability led to the decision to use four channels in the study. 

• Because of the large size of the actuators, the system must 
be all active; active /standby schemes would not be considered. 

The primary disadvantage of this approach, compared to the secondary 
actuator scheme, is that the main pistons must be oversized unless reduced 
force output capability is acceptable when channels are shut down. However, 
the potential advantages of the scheme make it worthy of further invest! gation t 
In spite of the fact that interchannel electrical connections are required, 
proper design should be able to make these connections almost as reliable 
as the synchronization shaft required by the secondary actuator approach. 
Also, if a failure in the interchannel connections does occur, the results are 
less likely to be catastrophic with the proposed approach. 

One last groundrule which is needed for the program is a precise definition 
of the desired force sharing performance. First, the maximum likely inter- 
channel mismatch was defined. Considering all the possible sources of 
interchannel mismatch, it was felt the mismatch between the nulls of any 
two channels would not likely exceed 10% of total actuator stroke. There- 
fore, the nominal offset condition was established with the nulls of two 
channels offset 10% ( of total stroke) from the other two. Under these cir- 
cumstances, the desired degree of force sharing is 95%, meaning that the 
load pressure of each channel can differ from the average load pressure by 
no more than 5% of supply pressure. For a supply pressure of 3000 psi, 
this would represent a 150 psi deviation from the average. 
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3 . 0 


SELECTION OF PROMISING FORCE-SHARING CONCEPTS 


Having set the basic groundrules for the force -sharing program, the study 
was begun by conducting a search of the available literature on redundant 
electrohydraulic s ervo -actuator s. The reports studied are References 1 
through 15. The majority of the redundant schemes reported employ flow 
summing or secondary force summing to position the main power spools, 
which are mechanically linked together. Force sharing at the main pistons 
is then achieved by mechanical synchronization of the power spools. Other 
schemes employ the active /standby concept. While all of these approaches 
are valid in certain applications, they do not satisfy the groundrules estab- 
lished for this program in Section 2. 0. Although the schemes using secondary 
actuators are not directly applicable, some of the secondary actuators them- 
selves do employ cross equalization techniques which are of interest. 

All of the concepts from References 1 through 15 which satisfy the ground- 
rules of Section 2. 0 were analyzed in enough detail to determine their major 
advantages and disadvantages. Also analyzed were some new ideas generated 
within Moog. The following subsections summarize the evaluations of the 
most applicable concepts. 


3. 1 Average - Value Equalization 

One fairly straightforward idea for cross -channel equalization was 
presented in the Moog proposal for the subject program. The concept 
was to adjust the null of each channel so as to drive its load pressure 
toward the average load pressure of all the channels. This is accomplished 
by comparing a channel's load pressure with the computed average pressure 
and feeding back the difference with high, gain, as shown in Figure 3* 1. If 
necessary, various operations can be performed on the equalization signal 
before feeding back. For example, the feedback can be integrated or 
lagged to make it a slow-acting correction. 
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FIGURE 3. 1 AVERAGE-VALUE EQUALIZATION 


If a channel should become significantly out of synchronization with the 
others (e. g. due to mismatched position feedback or command signals or 
due to servovalve null shift), the channel's load pressure will tend to go 
hard over. As the load pressure begins to change, the equalization will 
generate a bias signal to the position loop, which will tend to cancel the 
original mismatch in the loop. If the equalization loop gain is high enough, 
only a small difference between a channel's load pressure and the average 
pressure will be needed to offset gross mismatch between channels. This 
scheme has two major advantages. First, the equalization logic is fairly 
simple. Secondly, whenever the channels are perfectly synchronized, 
the load pressure signal within each channel is cancelled by the average 
signal, so that no equalization signal is generated. Thus, it would appear 
that this approach can provide force sharing without reducing output stiff- 
ness or affecting overall system performance. In addition, the equalization 
signal itself can be monitored to detect failures. 
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3. Z Mid -Value Equalization 

A prototype fly-by-wire control system was designed by Sperry under an 
Air Force contract* and was tested on a B-47 airplane (References 7 and 
8). The system employs secondary actuators; and therefore* is not 
directly applicable. However, cross equalization is employed in the 
secondary actuator package, and the technique used is very interesting. 
As applied to the subject program, this scheme would look functionally 
identical to the average value scheme depicted in Figure 3. 1, except that 
the reference pressure used in the equalization is the mid value rather 
than the average value* The B-47 system had three channels. For four 
channels, a separate fixed signal must be added to the mid-value logic, 
so that the logic selects the mid value of five load pressures. 

The brief initial study did not indicate whether the mid-value or average- 
value scheme was superior. It appeared that the most significant differ- 
ences would occur in the failure logic and in switching transients. 


3. 3 F- 111 '^aw. Damper KFquali zAtion 

The yaw -damper servo for the F-lll airplane was designed by Moog, 
using a free-floating piston concept for equalization (Section 6. 4 of 
Reference 1). Any load -pres sure difference between the two channels 
causes a free-floating piston between the channels to move at a propor- 
tional rate. The movement of this piston is fed back mechanically to both 
servovalves, thereby driving the load pressures toward each other. 
Although the scheme is clearly not directly applicable because of the 
hydromechanical mechanization, the technique was functionally examined 
for possible new ideas. 

Analysis showed that the F-lll technique is functionally very similar to 
the average value concept discussed in Section 3* 1, with the equalization 
signal being operated upon by combined integral and proportional functions. 
Because the technique is of no interest to the subject study from a mechan- 
ization standpoint and because it is functionally similar to the average 
value concept, it was not pursued further. 

3. 4 Bendix Synchronization Concept 

Bendix performed a study of synchronization techniques for a 3-channel 
redundant actuator (Reference 10). Three variations of the same basic 
technique were evaluated in the study. In the most promising version 


8 



MR E 1905 



("configuration A"), the equalization signal was generated by comparing 
the channel's own load pressure with that of the adjacent channel, as 
shown in Figure 3. 2. 



FIGURE 3. 2 BEND IX SYNCHRONIZATION CONCEPT 


As far as normal operation is concerned, the equalization is functionally 
very similar to the average value equalization of Section 3. 1. In fact, 
for a 2 channel system, the two schemes are functionally identical. As 
more channels are added, however, the Bendix approach appears to be 
inferior- to the average value concept, with regard to failures. For 
example, in a hardover failure, the Bendix equalization will cause the 
operating channels to follow the hardover channel with considerable gusto. 
This tendency will also be present with the average value system, but 
the magnitude of the failure transient should be considerably smaller. 

The reason for this is that the operating channels equalize toward the 
average value, which is more heavily weighted by the operating channels 
than the failed one. 
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In spite of the fact that the equalization concept of Reference 10 appears 
inferior to a similar approach already under consideration. Appendix A 
of the referenced report presents an interesting analysis of the equalization 
loops. This analysis shows that positive feedback was present in some 
cases, which could lead to instabilities. Basically, the analysis involved 
juggling the system block diagram with blocked load (i, e. load position 
held fixed at zero). This technique was applied to both the average -value 
and mid-value concepts previously discussed, to check for positive feed- 
back loops and their possible consequences. The analysis showed that the 
mid-value system has no positive feedback loops. The average-value 
system does have positive feedback loops present, but they are cancelled 
by corresponding negative ones. 


Master /Slave Concept 

During the initial study of the various available force-sharing concepts, it 
was suggested that a load sharing technique be investigated that is used 
when regulated electrical power supplies are placed in parallel. The 
hydraulic analogy would be to designate one channel as the master, giving 
it high position stiffness. The other channels would then be made pressure- 
control servos by using high-gain pressure feedback and opening their 
position feedback loops. These servos would then be slaved to a load pres- 
sure signal from the master channel, as illustrated in Figure 3. 3. 



FIGURE 3. 3 


MAS TER /SLAVE CONCEPT 



MR E 1905 



For normal operation, the master /slave system should provide very good 
force-sharing at pressure loop gains far below those needed in any of the 
systems previously studied. The reason for this is that no position loops 
are present in the slave channels. However, this advantage for normal 
operation quickly becomes a disadvantage when failures are considered. 

For example, a hardover failure in the master channel would cause the 
operating slave channels to happily follow the master; there are no oper- 
ating position loops to fight this tendency. Therefore, the master /slave 
system would be required to have very fast and foolproof failure detection/ 
correction logic to select a new master and perform the rather complicated 
switching. Even then, the transient caused by a hardover failure would 
probably be quite large. Thus, with regard to failures, the master /slave 
concept is grossly inferior to the other concepts under consideration, and 
will not be considered further. 


3. 6 Concepts Selected for Further Study 

On the basis of the study described in the foregoing subsections, the mid- 
value and average-value equalization schemes appeared to be the most 
promising for the subject program. It is not so obvious which of these 
two schemes is superior overall. For this reason, it was decided to 
investigate both concepts in more detail. 
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4. 0 MECHANIZATION OF SELECTED CONCEPTS 


With regard to mechanization of the average-value and mid-value concepts, 
an overriding consideration is to avoid compromising the fail-safe features 
inherent in all-active force-summed servo-actuators. With no equalization 
or failure detection /correction logic, a hard-over in one channel will be 
automatically offset by the remaining channels. The effects of the failure 
are limited to a small load position transient. To preserve this desirable 
feature, the following ground rules should be observed. 

• The equalization will probably increase the load position 
transients caused by hardover failures. Steps should be 
taken to minimize this degradation. 

• To achieve dual-fail-operate (DFO) capability, the offending 
channel must be shut off after each failure. If the equalization 
logic is to continue operating after two failures, it must be 
appropriately modified as channels are shut off. 

• Since both the equalization and failure detection /correction 
logic make use of cross -channel comparisons, the mechani- 
zation should minimize the chances of a single logic failure 
fouling up the operation of all the channels. For example, it 
must not be possible for a single failure to cause all four 
channels to be shut off. 

With these considerations in mind, it was decided to compute the equalization 
reference signals (average -value or mid-value pressure) separately within 
each channel. The most straightforward way to detect a failure is to monitor 
the equalization signal within each channel. When this signal exceeds a preset 
threshold, a failure is indicated. Mechanization details for each of the two 
equalization concepts are discussed in the following subsections. 


4. 1 Average -Value Logic 

Considering first the effects of hardover failures, it can be seen that the 
average -value equalization will cause the good channels to follow the 
hardover channel. To visualize this problem, consider first what would 
happen with the position loops open. A hardover in one channel will cause 
the computed average pressure to change one quarter of the way toward 
the hardover pressure. As this happens, the equalization in the operating 
channels will cause the nulls of these channels to move toward the hardover 
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channel, which causes the average pressure to change even more. The 
equalization will not be satisfied until the pressures of the operating 
channels are equal to the average. This can only occur when all the 
channels are hardover. However, the position loops of the operating 
channels will fight this tendency, with the magnitude of the failure tran- 
sient being determined by the relative magnitudes of the equalization loop 
and position loop gains. 

From the above arguments, it can be seen that the equalization loop gain 
should be no higher than is needed to achieve the desired degree of force 
sharing. This rules out the use of integral compensation, which gives 
essentially infinite static gain. To further limit the magnitude of failure 
transients, it was decided to electrically limit the equalization output 
signal to a value which is just large enough to equalize the largest expected 
null offsets. 


The biggest problem is how to modify the logic when failures occur. For 
the average -value, we must add the load pressure signals from each 
channel and multiply by — , where n is the number of channels. The most 
obvious way to account for shutoffs is to change the gain 1 with each shut- 
off. However, since we are planning to perform the average -value compu- 
tation separately within each channel, changing would require additional 
cros s -channel signals. To eliminate this hazard*? the scheme of Figure 4. 1 
was devised. When a channel is shut down, a relay would be de-energized 
within the failed channel, which would connect the pressure output signal 
from the failed channel to one of the inputs. This will result in a lopsided 
average being computed after failures have occurred. For example: 


APav - 


AP] + AP 2 + AP 3 + AP 4 
4 


(All Working) 


APav = 
APav = 


2AP2 + AP 3 4 AP 4 
4 

3AP 3 + AP 4 

5 

2AP 2 + 2AP 4 
4 


(# 1 Shut Off) 

(# 1 and # Z Shut Off) 
(# 1 and # 3 Shut Off) 


However, this appears to be a small penalty to pay for the inherent relia- 
bility of performing a simple switching operation entirely within the failed 
channel. 
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CHANNEL NO. I 



FIGURE 4. 1 AVERAGE "VALUE LOGIC 
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4. 2 


Mid- Value Logic 

A mid-value logic for a four-channel system must use an additional fixed 
signal so that the logic will select the mid-value of five sign! sis. » ‘“ e 
first failure is a hardover, the logic will continue to select one of the good 
channels, even if the hardover is in the direction of the £lxed Slgn ^ 
the second failure is also hardover in the direction of the £ix.ed 
however, the logic will pick one of the hardover channels. ™ us ’ 
again change the logic as failures occur. One way to approach the ^ 
is to use the shutoff command to send the failed channel s output s p 
hardover in the direction opposite to the fixed signal. The mechanization 
devised to accomplish this is shown in Figure 4. 2. A second fixed sign 
approximately equivalent to system pressure is added to the AP„ ■ sl S“^ 
generated by the pressure transducer. Each ”* d ^ * 

then selects the mid-value of (APi + Ps)> ( AP 2 + p s)> ( AP 3 s)>( 4 s 

and the fixed signal (2P„). The shutoff signal to a failed channel de-energizes 
a relay within that channel which grounds its pressure output si gna to 
the other channels. The resulting operation of the logic as £alluTeS „ 

is shown in Figure 4. 3. Thus, a fairly simple lo gic - changing SY^mwiU ' 
ensure that the MVC selects a good channel even after two channels 

failed. 


Because the equalization logic always selects the load pressure of an 
operating channel as the mid-value, the operating channels will never 
equalize toward the hardover channel. Of course, there will still be a 
failure transient, but the transient will not be aggravated by the equa i 
zation. This means that electrical limiting of the equalization output 
signal is not necessary. 


With regard to the mid-value computation its elf , there are several 
mechanization schemes which could be used. One of the simpler ones 
is sh&wn in Figure 4, 4. To understand how this scheme works consider 
the following example. Suppose that at a given instant, the input signals 
are ranked in order of decreasing magnitude (channel 1 closest to 2P S 
and channel 4 closest to zero), and the feedback loop is open. Each 
forward loop output will then be driven into the + 2P S saturation region 
and the summer output will be (+ 10P g ). Now let's close the feedback 
loop. Assuming there is some lag in the feedback loop, it will take some 
finite period of time for the feedback signal to change from zero to ( + 10Pg). 
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CHANNEL NO. I 



FIGURE 4. 2 MID -VALUE LOGIC 
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FIGURE 4. 3 FAILURE-UPDATE SEQUENCE OF 

MID -VALUE LOGIC 



17 


MR E 1905 



As the feedback signal passes (AP4 + F s ), channel 4 will receive a nega- 
tive error signal first, switching its forward loop signal to (~2F S ) and 
reducing the summer output to (+6P S ). When the feedback passes (AP 3 
+ P s ), the summer output will be reduced to ( + 2P S ). When the feedback 
has nearly reached (AF2 + P g ), the channel 2 error signal will become 
very small and channel 2 will be operating on the near-inifnite gain part 
of the non-linear gain curve. The system will reach equilibrium when the 
summer output is just enough below (AP2 + P g ) to ge n ^ r ^te an error signal 
in channel 2 which is just large enough that the channel 2 output remains 
just below (AP2 + P s ). Thus, the summer output follows the mid- value 
input signal closely (channel 2, in this case), with the outputs of channel 
3 and 4 cancelled by channel 1 and the (+2P S ) signal. 
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5. 0 DYNAMIC MODEL 


To perform a detailed evaluation of the force-sharing concepts, it was 
necessary to select a specific application. At the beginning of the program, 
NASA felt that the elevon control surfaces of the Space Shuttle Fly -Back 
Booster were a good example of the need for force-sharing. Because of the 
colossal size of the actuators envisioned for the elevons, it was necessary 
to dynamically scale the problem, so that smaller actuators could be used 
in the simulator hardware. Both the analog computer study and the simulator 
then used the scaled down parameters. The remainder of this section derives 
the dynamic equations used to describe the servo -actuator and shows how the 
problem was scaled down. 

While it is fully realized that the original Fly-Back Booster concept has gone 
the way of the dinosaur, the subject program was well underway before the 
Booster's untimely demise. Because the primary purpose of the program 
was a general study of the force -sharing problem, rather than a detailed 
design effort for a specific application, it was decided to stick with the origi- 
nal application,. This seemed to be a more efficient use of the available time 
and money than trying to keep up with the latest parameter changes in the 
Space Shuttle program. 


5. 1 List Of Symbols 

A Piston working area in^ 

Bj^ Equivalent linear damping of load, as seen by actuators, 

B L = H§ / R 2 ^ lb-sec /in 

e Voltage input to servovalve drive amplifier volts 

Position command voltage ~ volts 

e^ Equalization feedback voltage ~ volts 

F Force output of piston (positive for a push) ^lb. 

Fj-j Force disturbance applied to load (positive when aiding F) ~ lb. 

H Aerodynamic hinge moment of elevon (positive when opposing F) 
~ in - lb. 
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H 6 

H 5 

I 


i R 


K 


A 


k d 

K 


DA 


K, 


K- 


K P 

KpQ 


K 


Q 


K, 


Kr 


k vd 

k YE 

K vx 



Aerodynamic spring rate of elevon (dH/d 6) in-lb /rad 

# 

Aerodynamic damping of elevon (£ H/d 6 ) ~ in-lb-sec /rad 

Elevon moment of inertia about hingeline ~ in-lb-sec 2 /rad. 

Servovalve current ~ma 

Rated current, i to obtain Qj^ ^ ma 

Net stiffness of each actuator; includes oil spring 
and mechanical compliance ~ lb /in 

Feedback gain of dynamic pressure feedback (DPF)~v/psi 

Drive amplifier gain ~ ma/v 

Equalization feedback gain v /psi 

Equivalent linear spring rate of load, as seen by actuator, 
K l = H 6 /R 2 ~lb/in 

Servovalve pressure gain (blocked load) ~psi/ma 
Servovalve droop, KpQ - Kp/Kp ^cis/psi 
Servovalve flow gain (no load)~cis/ma 

Stiffness of actuator attach structure (per actuator ) ~ lb /in 

Net drive stiffness of each actuator (includes K A and Kg) 

~ lb /in 

Velocity gain of DPF loop ^sec‘^ 

Velocity gain of equalization loop ^sec"^ 

Velocity gain of position loop ^sec ^ 

Position feedback gain ~ v /in 

Equivalent linear mass of load, as seen by actuators, 

M l = I/R 2 ~lb -sec 2 /in 
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AP 


Differential load pressure across piston, AP = F /A ~psi 
AF av Average AP of the four actuators ~psi 

AP m 'd Mid AP of the four actuators and an arbitrary fixed AP of + Pg 
(in effect, AP m ^ is the more positive of the two mid value 
AP's) ~psi 

Pg Net supply pressure (pressure minus return) ~psi 
Q Flow output of servovalve ~cis 

Q Q under no-load conditions ^cis 

Q-p^ Rated value of at Pg ^cis 

R Length of crank arm between elevon hingeline and centerline 
of actuators ^in 

5 Laplace operator ~sec"^ 

Sp Total stroke of eac hi actuator - - rw/ in 

ri 

V Total trapped oil volume in each actuator ~ in 

X Position output of an actuator (load position relative to actuator 
body), positive for extend ~ in 

XI Position output of actuators relative to ground, Xl = 6r (X^ = X 
when Kg is infinite), positive for actuators extending ~ in. 

/3 Effective bulk modulus of oil ^p si 

6 Elevon angular position relative to ground, positive when 
actuators extending ~ rad. 

C l Load resonant damping ratio 

1/Tq Low-frequency corner of DPF r '~' rad/sec 

Load resonant frequency, =\/n Kp/Mj^ , 
number of operating channels ~ rad /sec 


where n is the 
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Dynamic Equations 

Because the load resonant frequency is relatively low (16 to 22 Hz), it 
was decided not to match the servovalve dynamics of the simulator 
actuators to the estimated dynamics of the Booster servovalve. Servo- 
valve dynamics were also neglected in the analog study. T e sta tc 
equation used to describe the servovalve function is as follows. 


= K 


- (sign 


11 (•©) 1 


- (K p q) AP 


When the servovalve output flow exceeds the flow required to move the ^ 
piston at the desired velocity, the excess flow winds up the u oil spring 
(and mechanical compliance of actuator), resulting in increased differ- 
ential pressure across the piston. This is shown in the following re a- 

tionships. 


/(£ - £>• ■ (& 


- (K A ) X 


AP = 


Q - 


The relationships between piston output force and load motions are shown 
schematically in Figure 5. 1, including the effects of structural complianc 
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Note that this figure shows only a single actuator; for multiple actuator s» 
there will be separate actuators and structural springs, all pushing on the 
same load mass. The piston output force causes the load mass to move 
relative to ground according to the following equation. 

(M L s 2 +b l s +K l )X l = f + f d 

While it is recognized that the aerodynamic hinge moments are rather 
complex functions of elevon deflection, elevon rate, and vehicle angle of 
attack, it was felt that the important dynamic effects of hinge moment 
could be adequately approximated by the linear terms and {K L and 
B^,) for a given flight condition. The force F also causes the actuator 
body to move against the structural spring until force balance is achieved: 

F = - (X L - X) Kg 

X = X L + /aap\ 

V K S ) 

As mentioned earlier, the load resonant frequency is relatively low. In 
addition, the inherent damping contributed by a critical center servovalve 
and aerodynamic hinge moments are small. Therefore, if any reasonable 
position loop gains are to be achieved, the load damping must be augmented. 
Moog often accomplishes damping augmentation by use of Dynamic Pressure 
Feedback (DPF). The concept uses hydromechanical logic to provide 
pressure feedback at frequencies near the load resonance, but washes out 
at low frequencies so that static stiffness is not degraded. The mechanism 
is basically a high-pass filter. Since a pressure transducer is needed for 
the equalization logic in the force-sharing system, it is much simpler to 
mechanize the DPF function electronically in this case. Therefore DPF 
feedback, consisting of a first-order high-pass filter, was added to the 
system • 

The foregoing relationships were then used to generate a complete functional 
block diagram of the four-channel force-sharing system. The block 
diagram for one channel is shown in Figure 5, 2. Note that no provisions 
have been made for torsional deflection of the elevon torque tube between 
channels. Because a soft torque tube reduces force fight, both the analog 
study and simulator use rigid torque tubes, as a “worst-case” condition. 
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5. 3 


Scaling Study 


The parameter values supplied to Moog by NASA for the Space Shuttle 
Booster were considered representative of the various competing designs 
which existed at that time. Some of the parameters were not known, and 
rough estimates were made. The complete set of parameters used is as 
follows. 


Full-Scale Booster Parameters 
A = 67 in 2 

= 198 lb -sec / in 

= 5,730,000 in-lb /rad. 

Hg = 47, 500 in-lb-sec /rad. 

I = 99 00 in -lb- sec 2 / rad. 

K a = 1, 040, 000 lb /in 
K l = 2 3, 800 lb /in 
K s = 2 48, 000 lb /in 
K t = 2 00, 000 lb /in 
Ml ~ 41.2 lb-sec 2 /in 
Pg = 3000 psi 
R = 15. 5 in 
Sp = 18. 0 in 

6 max = 30 deg/sec = 0.52 rad/sec {no load) 

= 140 rad/sec = 22. 3 Hz (4 channels active) 
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Although NASA recognized that the simulator hardware must be scaled 
down considerably from the Booster actuator in the interest of cost and 
size, they wanted the simulator actuators large enough that the simulation 
would be realistic. Therefore, NASA provided Moog with four spare 
Saturn actuators (Moog Model 17-150)* These actuators have a piston 
area of 5 square inches and a total stroke of 7.66 inches. . . T .. 

The design supply pres sure of the 17-150 actuators is the same as for the 
Booster actuators, i. e. 3000 psi. Therefore, if the piston differential 
pressures on the simulator are comparable to those on the Booster, the 
simulator force levels will be reduced in proportion to piston area, which 
is a sizable reduction. To provide a meaningful simulation of full-scale 
elevon behavior, the simulator hardware should be scaled so that the load 
responses are preserved. This means that the load angular responses 
should be essentially the same (angular displacement, rate, and acceler- 
ation). Because the 17-150 actuators have a shorter stroke than the 
Booster actuators, the actuator crank arm must be proportionally reduced 
to keep the maximum angular deflections the same. Therefore all linear 
displacements, rates, and accelerations seen by the actuators are also j 
reduced in the ratio of the strokes. In addition, all hinge moments are 
reduced in proportion to the piston area and to the crank arm 'length; - With ' 
these considerations in mind, the following relationships should be pre- 
served (the subscript b denotes Booster values, s denotes scaled simulator 
values). 




A 6 R s 

A b R b 


Using these relationships, the scaling equations for the various system 
parameters are as follows. 


Rg (Sp) s 

= < Vb 


. 426 
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^=i*£ =.1755 
<K L ) b (B L ) b (M L ) b \A h )[R J 

<fsk_ _ <^T>s.- /M/^b\ _ 1755 

|K s ) b (K A ) b (K x ) b K/(rJ 

• • 

(® max) s ~ (®max) b 


( W L ), _ /l(K T )g/ (M L ) s 

<“ L >b = t/ 4 < K T> b /( M L ) b 


1. 0 


These scaling equation yield the final parameter values for the simulator. 


Scaled Simulator Parameters 


A 

= 

, • 2 
5 in 

b l 

= 

34. 7 lb-sec /in 

Hfi 


182, 000 in-lb/rad. 

H a 

= 

1510 in-lb-sec /rad, 

i 

= 

315 in-lb-sec 2 /rad, 

Ka 

= 

193, 000 lb/in 

k l 

= 

4180 lb /in 

K s 


43, 6 00 lb /in 

k t 

= 

35, 500 lb /in 


= 

7. 2 3 lb-sec 2 /in 
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3000 psi 

6. 6 in 

7. 66 in 

30 deg/sec = 0.52 rad/sec 

140 rad/sec = 22. 3 Hz {4 channels active) 

Note that the values of and Kp’ are very slightly higher than would be 
given by the scaling equations. The value of shown is the estimated 
stiffness of the actual 17-15 0 actuators. Since this number is only 5% 
higher than the desired value* it did not make sense to modify the actua- 
tors. The value of Kp 1 shown was calculated as the series combination of 
and Kg (this value of K-p is only 1% higher than desired). 

The servovalve used on the 17-150 actuator is a Moog Model 16-120* 
modified to a conventional flow-control configuration by removing the 
Dynamic Pressure Feedback (DPF) hardware. This servovalve has the 
following characteristics at a supply pressure of 3000 psi. 



II 

a 

6. 0 cis /ma 

ii 

1 3, 000 psi /ma 

K PQ “ 

.00046 cis /psi 


The servovalve also has a rated flow of about 70 cis and a rated 
current of 10 ma (parallel coils). Since; the flow required to 
achieve a maximum elevori rate of 30 degrees per second (3. 4 
inches per second) is only 17. 3 cis, the servovalve current must be 
electrically limited. The simulator values then used are as follows. 


X R 

3 ma 

Qr = 

18 cis 
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6. 0 ANALOG COMPUTER STUDY. 

Evaluation of the relative merits of the two competing force-sharing schemes 
was accomplished on Moog’s EAI TR-48 analog computer. An analog block 
diagram was developed from the functional diagram of Figure 5. 2, and is 
shown in Figure 6. 1. Some of the analog circuits are rather unconventional, 
making liberal use of external patching. This was done to conserve ampli- 
fiers. Note that the parameter values given are in Machine Units (one 

Machine Unit = 10 volts). The analog diagrams for the average -value and 

mid-value logic are given in Figures 6. 2 and 6. 3, respectively. It should be 
noted that the equalization reference pressure (average or mid-value)is 
computed only once for all four channels , instead of separately within each 
channel 3 as was suggested in Section 4. 0. This change was made m the 
interest of simplicity; the redundant computation approach was left for the 
simulator electronics. 

As explained in Section 4. 1, it is necessary to limit the maximum output of 
the average-value equalization (AVE) to minimize transients due to hardover 
failures. The zener clamps shown in Figure 6. 2 were determined as follows. 
The design ’Vorst-case” null offset condition for the subject program.was 
defined infection 2. 0; the nulls of two channels are initially offset 10% of 
total stroke from the other two. Since the measured system gain (4 channels 
active and serodynamic forces present) was (Xy /e c ) = 0. 106 in /volt, the 
effective command offset is (. 10 S p /. 106) = 7.? volts. Since the AVE will 
try to equalize all four nulls to an average position, the maximum equalization 
signal needed is 3. 6 volts. The maximum output of the circuit of Figure 6. 2 
should be 0. 75 Machine Units or e E = 3. 8 volts (measured limit is actually 

4. 1 volts). 

The mid-value equalization (MVE) of Figure 6. 3 utilizes AP signals instead 
of the (AP + Pc) signals suggested in Section 4. 2. Again, this was done in 
the interest of simplicity, but channel shut-offs were handled so that the 
functions described in Section 4. 2 were duplicated. The mid-value logic was 
checked for computational accuracy, and it was able to compute the mid-value 
as precisely as it could be measured. This accuracy was maintained over 
the entire range of load pressures, and there was no indication that the MVE 
became confused when all four channels had virtually identical load pressures. 
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The parameter values used in the analog study were the scaled simulator 
values determined in Section 5. 3, with one exception. The value of KpQ 
listed in Section 5. 3 is the estimated value for the 16-120 servovalves used 
on the simulator (. 00046 cis /ma). This value is probably not representative 
because the servovalve is oversized and its output has been electrically 
limited. A servovalve specifically designed for the desired lower flow would 
probably have a lower Kp„. A critical-center servovalve will typically 
achieve pressure saturation at about 3% of rated current {. 03 ij^ Kp = Pg). 
Using this criterion, the KpQ can be determined as follows. 

P s 3000 

K P= 703]*- = 703(3) = 33. 300 psi /ma 


K q 6. 0 

K PQ = Kp = 33, 300 


. 00018 cis /ma 


Therefore? . 00018 cis /ma was used for the analog study, instead of . 00046. 
Actually, the difference in K^q between the analog computer and simulator 
is of little importance. The reason for this is that primarily affects 

load damping and output stiffness. Roughly 92% of the Total load damping 
comes from the dynamic pressure feedback (DPF), and the closed-loop loa d 
stiffness of the actuator position loop is about two orders of magnitude higher 
than the stiffness of the actuator -attach structure (K^). Therefore, the 
primary effects of K are negligible compared to the effects of the DPF and 

XT U 

Kg. 

The drive amplifier gain and the feedback gains of the various loops are of 
little importance in themselves; the overall loop gains have the primary 
influence on system performance. Therefore, K D ^ was arbitrarily fixed 
at 3. 57 ma/volt {KpA Kq = 21. 4 cis /volt) so that the various loop gains 
could be individually changed by adjusting the feedback gains. The following 
subsections present the results of the analog study. It should be remembered 
that the analog study does not include servovalve dynamics. 


6. 1 Basic Servoloop Characteristics 

The first step in the analog study was to select appropriate values for 
the DPF and position feedback parameters. This was done with ail active 
channels perfectly synchronized. Since the load resonant frequency is 
reduced as channels are shut off, the DPF parameters were optimized 
for 2 -channel operation. This process was accomplished by manipulating 
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a linearized version of the analog model with a digital servoanalysis 
program. From a stability standpoint, it is desirable to set the DFF 
corner frequency as low as possible (approaching proportional pressure 
feedback). However, low corner frequencies substantially reduce the 
low-frequency load stiffness. The linear analysis established a good 
compromise value at about one third of the load resonant frequency (2 
channels). 

1/T n = (1/3) /l40 ^ = 33 rad/sec 

\rr^j 


With the corner frequency determined, the DPF loop gain is a compromise 
between stability and bandwidth. High DPF gain improves load resonant 
damping, but excessive gain results in large phase lags in the position 
loop, thereby replacing gain margin problems (low DPF gains) with phase 
margin problems (high DPF gains). The best balance between position - 
loop gain margin and pfrase margin was achieved at Kq = . 0019 volts /psi. 
At frequencies above » the * DPF loop looks basically like an 
integrator. This can be seen from Figure 5.2 by blocking the 
load ( Xl held at z^ro ) and closing the structural compliance - 
loop. The velocity gain of this integrating loop is as follows. 

k vd = k d Ada K Q K 

\ A 2 


58 sec 


-1 


It is this loop gain which directly determines the improvement in load 
resonant damping (Z£ = K VD^ and which rnust therefore be duplicated 

on the simulator. 


With the DPF parameters set into the analog computer, the position feed- 
back gain wae increased until the small-signal frequency response to 
position commands exhibited a load-resonant peak equal to 0 dB, with 
four channels operating. The value of required to achieve this was 
9. 0 volts /inch. With only two channels operating, the small-signal response 
exhibits a + 3 dB peak, but this is not serious. The open-loop character- 
istic of the position loop (up to the load-resonant frequency) also looks like 
an integrator. This can be seen from Figure 5. 2 by neglecting the load 
(AP held at zero). The velocity gain of this integrating loop is as follows. 

K vx = Kx ^ KdaK 

Note that this loop gain is about 10 times the value that can be achieved 
with no DPF. 


& 


-) 


= 39 sec 


-1 


34 



MR E 1905 


With the DPF and position loop parameters set, data was taken to deter- 
mine the response characteristics of the basic system. The eleven 
■position responses to command inputs are shown in Figures b. 4 and 
6. 5. These are actually X. responses with the appropriate conversion 
factor applied (57. 3 /R = 8^7 deg/in). From Figure 6. 4, it can be seen 

that the position-loop bandwidth (frequency for 90 phase lag) is z, 

(4 channels) and 11 Hz (2 channels). If K L and are set to zero, e 

step responses are virtually identical to those of Figure 6. 5. ns 
simulates operation in parts of the flight envelope where aerodynamic 
loads are small. Of course, these responses were all measured with an 
initial eleven angle of zero. With large initial elevon angles, the responses 
are more affected by the aerodynamic loads. 


To illustrate the effects of rate limiting, Figure 6.6 compares frequency 
responses for 4° and 2° P-P elevon command inputs with the 1 P-P 
response of Figure 6. 4 ( 4 channels operating ). Notice that the rate limiting 

does little to reduce the resonant peak. The reason for this is that t e 

servovalve itself is causing the rate limiting; and because the DPF is 
mechanized electrically, the servovalve is inside the DPF loop. Thus, 
rate limiting effectively reduces the DPF loop gain, and thereby tends to 
prevent the DPF from damping the load resonance. Fortunately, the same 
effect also reduces the position loop gain. The effects of rate limiting on 
the time response of the actuator are shown in Figure 6. 7 (a 2 elevon step). 
Notice that even though the damping of the load resonant mode is reduced, 
the residue of this mode is still small. The response is rather lumpy, but 
is reasonably well behaved. 


Figure 6. 8 shows the load position response to a small external disturbance 
force, e. g. to simulate a wind gust hitting the elevon (4 channels operating). 
Notice that there is considerable amplitude magnification at high frequencies. 
This is partly due to the load resonance, but is primarily due to the fact 
that the DPF has reduced the actuator stiffness at high frequencies. If 
proportional pressure feedback were used Instead of DPF or if no pressure 
feedback were used (necessitating a reduction in position loop gain), the 
frequency response' would be much flatter. However, the flattening would 
not be due to an increase in -high frequency stiffness, but would instead be 
due to a decrease in low frequency stiffness. Thus DPF is desirable to 
maintain static stiffness. 
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A*OOC INC.. EA0T AURORA MW 


4 Channels Operating 



Scales : 

0. 2 deg/div (vert) 
0. 0Z sec/div (hor) 


2 Channels Operating 



FIGURE 6. 5 ELEVQN RESPONSE TO + 1° COMMAND STEP 
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1° P-P Response 
2 ° P-P Response 
4° P-P Response 



FIGURE 6.6 EFFECTS OF RATE LIMITING ON 

E LEVON FREQUENCY RESPONSE 
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Scales : 


0. 4 deg/div (vert) 
0.02 sec/div(hor) 



ELEVON RESPONSE TO + 2° 


FIGURE 6. 7 
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FIGURE 6. 8 FREQUENCY RESPONSE OF ELEVON TO 

3000 LB. F-F LOAD DISTURBANCES 
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6. 2 Effects of Equalization - Normal Operation 

To evaluate the two equalization schemes on the analog computer, the 
characteristics with all four channels operating were first examined. All 
evaluations were performed with the "worst-case 1 * offset conditions defined 
in Section 2. 0. The nulls of channels 1 and 2 were offset + 10% of full 
stroke (command voltages biased . 10 Sp/. 106 - + 7. Z volts), while channels 
3 and 4 were not offset. The equalization feedback gain required to achieve 
the desired degree of force sharing under these conditions was K E = . 0233 
volts /psi for both the AVE and the MVE. The corresponding loop velocity 
gain can be computed in the same manner as for the DPF loop (Section 6. 1). 

= 710 sec' 1 


K VE = K E ftDA K Q K T 
\ A^ 


Using this equalization gain with the specified offset condition, the following 
static results were obtained for zero command input and zero load disturbance. 


Measured 


equalization 


Output 

None 

AVE 

MVE 

X. ~ In. 

+ . 35 

+ . 40 

+ . 76 

6 ~ Deg, 

+ 3. 0 

+ 3. 5 

+ 6. 6 

AP i ~ Psi 

+ 3000 

+ 230 

+ 300 

AP 2 ~ Psi 

+ 3000 

+ 230 

+ 300 

AP 3 ~ Psi 

- 2850 

- 67 

+ 14 

AP 4 ~ Psi 

- 2850 

- 65 

+ 18 

AP av ~ p si 

+ 75 

+ 82 

+ 158 

Max( AP n - AP av ) 

2925 

149 

144 

AP mid 

-- 

-- 

+ 300 

Using the definitions of Section 2. 0, force fight is the load pressure 
deviation of the worst active channel from the average load pressure, 
expressed as a percentage of supply pressure. With this in mind, the 
bottom row of the table shows that both the AVE and MVE reduce the 
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force fight from nearly 100% to about 5%. The only apparent difference 
in the 2 schemes is that the AVE equalizes the channels toward each 
other, while the MVE equalizes toward the mid-value channel, which in 
this case is the offset channel 1 (or 2). (Remember that the MVE selects 
the more positive of the middle two pressures as the mid-value. ) 

Another primary effect of equalization is improvement of static load 
stiffness to external disturbances. Figure 6.9 shows the measured 
stiffness characteristics with zero command input. Note that equalization 
effectively doubles the average stiffness when interchannel mismatch is 
present. Equalization also eliminates the flat spot in the stiffness curve 
near null. In fact, with the high position loop gain being used, the equali- 
zation has made the actuators themselves so stiff that the overall system 
stiffness approaches that of the attachment structure (4 K s = 174, 400 

lb /in, F d /X l = 170, 000 lb /in for MVE and 160, 000 lb/in for AVE). 

After studying static characteristics, transient response data was taken 
for command and disturbance step inputs. Figure 6. 10 sbcnva -the elevon 
response to small command steps (channel 1 and 2 nulls again offset + 10%). 
The AVE and MVE responses are reasonably fast and well behaved. In 
fact, they are virtually identical to the response with all four channels 
perfectly synchronized (see Figure 6.5). Without equalization, the step 
causes the response to be somewhat sluggish. The load pressure responses 
for the small command steps are shown in Figure 6. 11. Notice that equal- 
ization not only reduces the steady-state force fight, but also reduces the 
force transients. 


The elevon response to a large load disturbance is shown in Figure 6. 12 . 
Equalization has improved not only the static stiffness (as was previously 
shown in Figure 6. 9), but also the dynamic stiffness. Figure 6. 12 also 
shows that equalization reduces the load pressure transients. 

On the basis of the foregoing discussion, it would appear that the two 
equalization schemes provide many benefits with no obvious disavantages 
as far as normal operation is concerned. The only significant difference 
in the two schemes is that the AVE equalizes all the channels toward each 
other, while the MVE equalizes 3 channels toward the mid-value channel, 
which may have an offset null. 


42 




MR E 1905 



FIGURE 6. 9 EFFECT OF EQUALIZATION ON SYSTEM 

OUTPUT STIFFNESS 
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Scales : 

0. 2 deg/div (vert) 
0. 02 sec /div (hor) 
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FIGURE 6, 10 EFFECT OF EQUALIZATION ON ELEVON 

RESPONSE TO + 1° STEP COMMAND 
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FIGURE 6. II EFFECT OF EQUALIZATION ON LOAD 

PRESSURE RESPONSE TO + 1° STEP COMMAND 
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6. 3 Effects of Equalization - Hardover Failures 

Before discussing the effects of failures and shutdowns, it is first worth- 
while to review the logic changes within the equalization as channels are 
shut down. These changes are explained in detail in Sections 4. 1 and 4. 2, 
and can be summarized as follows. When the MVE is used, shutdown of 
a channel causes that channel's AP signal into the MVC to become the 
equivalent of - 3000 psi. (It is assumed that shutdown always bypasses the 
piston, so that the channel's actual AP to the load goes to zero.) When 
the AVE is used, shutdown causes the channel’s AP input line to the aver- 
aging amplifier to be disconnected from that channel and shorted to the AP 
input line from another channel. The sequence arbitrarily selected is: 
channel 1 shorts to channel 2, 2 to 3, 3 to 4» and 4 to 1. 

Since the system is supposed to have dual-fail-operate (DFO) capability, 
it was decided to study the effects of a series of 2 hardover failures fol- 
lowed by shutdowns. To determine the most critical sequence, the steady- 
state elevon deflections were examined for a large number of sequences. 
This study determined that the most critical sequence for no equalization 
and for MVE is : channel No. 1 hardover (-), No. 1 shutdown, No 3 
hardover ( + )» No. 3 shutdown. For the AVE, the most critical sequence 
is : No. 1 hardover (-), No. 1 shutdown, No. 2 hardover (-)> No. 2 
shutdown. A comparison of the steady-state elevon deflections is presented 
in the following table. For ease of comparison, AVE data are presented 
for two failure sequences. 


Elevon Deflection ^ Deg. 



Before 

Failures 

API— ► 
- 3000 

No Equal 

+ 3. 0 

+ 0. 1 

MVE 

+ 6. 6 

0. 0 

AVE 

+ 3. 5 

i 

o 

• 

<ji 

AVE 

+ 3. 5 

- 0. 5 


No. 1 
Shutoff 

AP 3 -* 
+ 3000 

No. 3 
Shutoff 

+ 1. 5 

+ 6.2 

+ 2. 9 

+ 0. 8 

+ 7. 9 

+ 0. 6 

+ 3. 3 

+ 6. 4 

+ 3. 3 


AP;> — *> 
- 3000 

No. 2 
Shutoff 

+ 3. 3 

- 5. 1 

o 

• 

o 
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This table shows several interesting things. First, both equalization 
schemes increase steady-state elevon movement in almost every case. 

The AVE is superior to the MVE on the first hardover failure (change in 
6 is 6. 6° for MVE, 4. 0 e for AVE). On the second failure, the AVE is 
also superior when the failure is in channel 3 (7. 1 for MVE, 3. 1 for 
AVE). When the second failure for the AVE is in channel 2, the change 
is larger than for the MVE (8. 4* ). The reason for the larger AVE 
transient when channel 2 goes hardover, is that the previous shutdown 
of channel 1 has caused AP 2 to be weighted by a factor of 2 in the aver- 
aging amplifier: 

AP av = 2AP Z + AP 3 + AP 4 

4 

Thus, it is not clear which scheme is perferrable, from a failure standpoint. 

The steady-state load pressure changes for the failure sequences described 
above are given in the following table. Note that the values shown are the 
actual actuator load pressures; the pressure signals sent to the equalization 
depend upon which channels are shut down. 


Change 

Equal. 

AP X 

A?2 

ap 3 

ap 4 

AP * 
fifTav 


none 

none 

+ 3000 

+ 3000 

-2850 

-2850 



1 

MVE 

+ 300 

+ 300 

+ 14 

+ 18 


+ 300 

T 

AVE 

+2 30 

+230 

-67 

-65 

+82 

— 

AP, — ►- -3000 

I 

none 

- 

■3000 

+ 3000 

-36 

-36 

— 

— 

MVE 


1 

+ 1170 

+930 

+890 


+ 930 

▼ 

AVE 


r 

+2900 

+7 

+ 10 

-21 

— 

No. 1 Shutoff 

none 

0 

+ 3000 

-1430 

-1430 

— 

-46 

I 

MVE 



+ 192 

-46 

-66 


T 

AVE 



+ 303 

+7 

+9 

+ 156 

— 

AP, — *►+3000 

none 



+630 

+ 3000 

-3000 



! 

MVE 



-97 0 

1 

-1260 

— 

-970 

▼ 

AVE 



+218 

t 

-2560 

+219 


No. 3 Shutoff 

none 



+ 3000 

0 

-2700 

— 


I 

MVE 



+ 172 

1 

-118 

— 

-118 

f 

AVE 

1 

f 

+ 306 

i 

+ 12 

+ 159 


AP, ► - 3000 

AVE 

0 

-3000 

+ 1160 

+ 1300 

-885 


No. 2 Shutoff 

AVE 

< 

3 

0 

0 

0 

0 



£ Computed by AVE or MVE logic 
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The primary conclusion to be drawn from this table is that equalization 
continues to hold force fight between active channels to a minimum, even 
after failed channels are shut down. The MVE provides slightly less force 
fight after the first shutdown, but the advantage is small (5. 5% for MVE, 

6. 5% for AVE). The effects of equalization on transient response for the 
failure sequence discussed above are shown in Figure 6. 13. This figure 
shows that equalization generally results in a less abrupt transient with 
less overshoot, even though the steady-state change is increased. The 
elevon response to command inputs with two channels shut off is the same 
as if the channels were perfectly synchronized. 


6. 4 Failure Detection 

Having not yet found any clear-cut reasons for choosing between the two 
equalization schemes, a brief study was made to determine the best 
approach to the problem of detecting failures. This study uncovered a 
major problem: failure detection with the AVE is very difficult, if not 
completely impractical. This can be seen by referring to the hardover 
failure data of Section 6. 3. The static AP data show that failures could 
be very nicely detected for the MVE by simply monitoring the equalization 
signal in each channel. For example, a failure signal could be generated 
whenever (AP n - AP mid ) exceeds, say, 500 psi. If this same technique 
were used with the AVE, however, the detection logic would indicate that 
two channels had failed when, in fact, only one channel had done so. 

The basic problem with the AVE is that the clamp on the output of the 
equalization amplifier (Figure 6. 2} prevents the active channels from 
working together in opposing the hardover. For example, when channel 1 
goes hardover, it is opposed entirely by channel 2 while channels 3 and 4 
contribute essentially nothing. The active channels in the MVE work 
together in opposing the hardover, and the only large equalization signal 
generated is in the failed channel. 
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Since the basic problem in the AVE is created by the clamp, one obvious 
fix is to raise the clamping voltage. The effects of opening up the AVE 
clamp are shown in the following data, for channel 1 going hardover. 


F ailur e 

Clamp 

Elevon 






Computed 

State 

Voltage 

Position 

£P l 

ap 2 

A P 3 

_ap 4 

av 

No Failures 

Any 

+ 3. 0° 

+230 

+230 

-67 

-65 

+82 

AP 1 — ► 
-3000 

Normal 

- 0. 5° 

-3000 

+2900 

+7 

+ 10 

-21 

Doubled 

- 3.6° 



+2 52 0 

+67 

+66 

-87 

1 

1 

C lamp 
Removed 

- 17.2° 

1 

f 

+620 

+ 320 

+ 320 

-435 


It can be seen that the effect of opening up the clamp is to allow the active 
channels to more evenly share the load in opposing the hardover. However, 
this trend is accompanied by an increase in the magnitude of the failure 
transient. For example, doubling the clamping voltage roughly doubles 
the transient, and the improvement in failure detection is not great. Pro- 
bably the best failure criterion to use would be to sense when AP itself 
exceeds a set limit; but even with the clamp doubled, this threshold would 
have to be set around 2800 psi to avoid having failure indications on a good 
channel as well as on the failed one. This is pretty marginal because a 
drop in supply pressure or a AP transient could foul up the works. 

Other potential solutions to the failure detection problems of the AVE 
have been evaluated, but all seem to result in rather marginal detection 
thresholds. Because failure detection with the AVE seems to be totally 
impractical, the only alternative is to pursue the MVE scheme. To 
further investigate the subject of failure detection, various failures in the 
equalization logic itself were investigated on the analog computer. The 
data for various failures in the MVE of channel 1 are shown below. 
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Elevon AP^ - ( AP mid) 


Failure 

Position 

AP x 

( AP midh 

AP 2 

ap 3 

ap 4 

(Oh. 2, 3, 4) 

None 

+ 6. 6° 

+ 300 

0 

+ 300 

+ 14 

+ 18 

+ 300 

Equal, output open* 

- 1.4° 

-2780 

0 

+660 

+ 1020 

+970 

+970 

XDCR output open 

+ 6. 1° 

+ 1060 

0 

+41 

-260 

-250 

0 

AP neg. fdbk. open 

+ 6.9° 

+ 1010 

oo 

t 

+84 

-220 

-210 

+84 

AP mid out P ut open 

+ 3. 8° 

+ 140 

+ 140 

+ 275 

-26 

-18 

+ 140 

AP mid out P ut 

hardover 

- 0. 3° 

-2800 

+ 1490 

+ 1090 

+850 

+ 815 

+ 850 

Equal, output 

hardover 

i 

o 

• 

Ln 

o 

-2790 

-4190 

+ 1080 

+ 840 

+810 

+840 



AP n ’s are actual, (^Pmid)z34 are computed values, and ^Pi - (AP m idJ 1] 
is the computed value seen at the equalization output. Initially, channels 
1 and 2 nulls are offset + 10% (except for the case with the * > where the 
offset is - 10%. 


Having decided to use the MVE scheme for the simulator evaluations , the 
failure-detection logic for each channel can be designed to monitor the 
output of the equalization, with the detection threshold set at 500 psi. 
Referring to the above data, it is apparent that there will be no false 
failure indications (AP - APmid f° r channels 2, 3, 4 will be considerably 
less than 5 00 psi). In addition, the 2 hardover amplifier failures will be 
immediately detected. Of the 4 open failures, 3 will be detected as soon 
as the actuators are asked to develop a significant force output. It is not 
yet clear whether the transducer -open failure can be detected. 
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7. 0 SIMULATOR EVALUATIONS 


The final phase of the force- sharing program was to design and fabricate a 
load simulator, so that the concepts developed in the foregoing sections 
could be evaluated with actual hardware. The simulator fixture itself was 
designed to duplicate the scaled-down Space Shuttle parameters of Section 5. 3 
as closely as possible. The electronics were designed to implement the mid- 
value logic of Section 4. 2, and to facilitate data gathering and failure simu- 
lation. The following subsections briefly describe the simulator hardware, 
and then present the results of the test program. The reader is referred to 
Appendix B for a more detailed description of the simulator, together with 
operating instructions. 


7. 1 Mechanical and Hydraulic Hardware 

The first attempt at designing the simulator resulted in a configuration 
which placed the four actuators side-by-side, pushing on a common torque 
tube or crankshaft, much as they would on an actual elevon surface. 
However^ providing sufficient stiffness in the frame and crankshaft proved 
to be a difficult task, and this approach was therefore abandoned. The 
final fixture configuration is shown in Figure 7. 1. The four Model 17-150 
actuators are arranged in opposed pairs, pushing on a short crankshaft. 
From the center of the crankshaft hangs a pendulum, which simulates the 
elevon moment of inertia. Between each pair of actuators is a " liquid 
spring ", manufactured by Taylor Devices Incorporated of North Tonawanda, 
New York (Taylor Model 4S5451-01). These springs are connected between 
the frame (ground) and the center of the crankshaft, to simulate the aero- 
dynamic spring rate of the elevon surface. No attempt was made to 
simulate aerodynamic damping since the analog study showed that this 
parameter has little effect on the system performance. The bodies of 
the actuators are connected to individual leaf springs, which are bolted 
to the ends of the frame. These leaf springs simulate the compliance of 
the elevon attach structure (Kg). 

The liquid springs are basically hydraulic cylinders with the piston head 
missing, so that the rod itself is the only internal moving part. As the 
rod is pushed into the cylinder, the silicone fluid is slightly compressed, 
resulting a modest spring rate for very long strokes. Because the springs 
can be used in compression only, two opposed springs were necessary. 

The rods are connected to the crankshaft through sliding collars, so that 
only one spring is compressed at a time (neither spring is compressed 
when the crankshaft is centered). The measured spring rate is 3960 lb /in 
at 74°F, reflected to the actuator crank arm. This is about 5% below the 
desired value of = 4180 lb/in. Of course, there must be a slight 
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preload in the spring adjustment to ensure positive centering. This 
preload is highly sensitive to the temperature of the silicone fluid, and 
should be checked daily. An attempt was made to keep the breakout force 
at about ± 2 50 pounds, reflected to the actuator crank arm (load pressure 
of ± 50 psi for a single actuator to break out the springs). 

Measurements of the leaf spring rates were made with the actuator attach 
fittings at their lowest position and the base attach bolts torqued to 300 
foot-pounds. The four springs were reasonably consistent in their behav- 
ior, the rate being higher with the actuator pulling than with it pushing. 

The average rate is 42, 600 lb /in, with the largest deviation being 5% high 
in the actuator -pull direction and 5% low in the actuator -push direction. 

The average rate is about 2% lower than the desired Kg of 43, 600 lb/in. 

The load inertia cannot be measured directly, but the load resonant fre- 
quency was measured with only actuator numbei 4 connected to the crank- 
shaft (this actuator has Kg virtually identical to the average of 42, 600 
lb/in). The measured natural frequency was 10.6 Hz, and the frequency 
calculated from the desired values of K'p and Ml is 11. 1 Hz. 

Figure 7. 2 is a close-up of one of the 17-150 actuators. The actuator has 
been modified by placing a special manifold block between the servovalve 
and actuator body. Plumbed into this manifold block are a solenoid bypass 
valve and a cross -port relief valve. The manifolding is arranged so that 
both valves interconnect the two sides of the actuator piston, when they 
are opened. The relief valve prevents excessive load pressures from 
being generated if the servovalve is suddenly closed when the load is moving 
at maximum velocity. The valve is a Waterman Model 1 5 18- 3- 3000, which 
is a direct-operated spool type. The relief setting is adjusted so that the 
valve cracks at approximately 32 00 psi and reseals at about 2 900 psi. The 
solenoid valve is opened when a channel is shut off, so that the piston can 
be moved by the remaining active channels with minimum resistance. The 
solenoid valve is a Waterman Model 1620-3A-110. It is a direct-operated 
spool type, actuated by a 110 VAC solenoid. The valve is closed when the 
solenoid is deenergized, so that the coils are not continuously drawing 
electrical power during normal operation. 

Another change to the actuator is that the DPF mechanism was removed 
from the 16-12 0 servovalve and a small adaptor manifold attached in its 
place, so that a differential pressure transducer could be fitted to the 
servovalve (see Figure 7. 3). The transducers used are some spare ones 
from the Moog Titan actuators (Moog Part Number 062-24924). These 
transducers are designed so that the output signal is zero when the load 
pressure is 3500 psi in one direction (port 2 high), 20 mv when the pressure 
is zero, and 40 mv when the pressure is 3500 psi in the opposite direction 
(port 1 high). 
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Actuator position information (X) is provided by the standard potentiometer 
for the 17-150 actuator, which is located inside the piston rod. It is a 
linear film-type device with dual elements and a nominal electrical travel 
of 11. 1 inches. Load position information (X L and 6)is provided by a 
small rotary potentiometer mounted directly on one end of the crankshaft 
(see Figure 7. 1). The pot is a film type with a nominal electrical travel 

of 340 degrees. 

The channels are numbered with 1 and 2 opposing each other and 3 and 4 
opposing each other. Channels 1 and 3 are on one side of the crankshaft, 
and 2 and 4 are on the other. The polarities of the excitation voltages for 
the actuator position and pressure transducers were reversed on channels 
2 and 4, as well as the servovalve current. In this way, a positive elevon 
command signal (actually a negative command voltage) will cause channels 
1 and 3 to extend while channels 2 and 4 retract. The actuator positions 
(X) are all defined as positive in this direction, as are the load pressures 
(AP) required to accelerate in this direction. The transducer outputs all 
have the same output magnitude and sign. The channels are matched well 
enough in both directions that nearly perfect force sharing can be obtained 
without equalization, over a wide range of operating conditions. This 
means that carefully- controlled amounts of interchannel mismatch can be 
introduced during the force- sharing experiments. 


Electronic Hardware 

An electrical schematic for the electronics of channel number 1 is shown 
in Figure 7. 4. The other three channels are identical, except for the 
polarity differences noted in the figurns 1 . The simulator electronics are 
somewhat elaborate, to provide maximum flexibility for test purposes. 

This should not be interpreted as an indication that the force-sharing system 
is inherently complex; the basic electronics needed for flight hardware 
could be considerably simpler than shown in Figure 7. 4. 

It will be noticed that the circuitry for the mid-value computation is 
somewhat simpler than was used in the analog study (see Figure 6. 3). 

This simplification was based on the design used in Reference 8, and 
seems to have very adequate accuracy. The reason for lagging the equali- 
zation output will be explained in Section 7. 4. Another change from the 
analog circuitry is the addition of failure detection /correction logic. 

When the equalization output signal exceeds the preset threshold value, 
relay K1 is pulled in, which lights a failure indicator. If the mode selector 
(SI) is in the AUTO position, the channel is shut off when K1 pulls in, and 
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K1 latches. In shutting off the channel, K1 performs three distinct functions: 
(1) the bypass solenoid valve is opened, (2) the servovalve coils are opened, 
and (3) the wire carrying the channel's load pressure signal to the other 
three channels is grounded. Once such an automatic shutoff has occurred, 
re-engagement of the channel can only be made by first correcting the 
source of the failure, and then switching the mode selector to ENGAGE 
and back to AUTO (this latter action resets the latch). The ENGAGE and 
SHUTOFF positions of the selector switch provide for manual engage or 
shutoff of a channel, independent of what the failure detector is doing. 

For the simulator hardware, the schematic of Figure 7. 4 is mechanized 
on a series of printed circuit cards. The card rack, power supply. and relays 
are all mounted in a small 19-inch relay rack. The front panel of the rack 
is shown in Figure 7. 5. The top panel covers the front of the card rack, and 
the holes are for screwdriver adjustment of various trim pots mounted on 
the printed circuit cards. Below this are the remaining pots, the switches, 
and a very elaborate patch panel for each channel. Many of the interconnect 
wires between the printed circuit cards are brought out to the patch panel 
and jumpered by 2 -pin shorting plugs (plugs removed on channel 1). In this 
way, the various circuits can be broken in strategic places by simply pulling 
a plug. This makes it easy to simulate failures, study open-loop charac- 
teristics, remove functional elements, calibrate the system, and take data. 
Appendix B shows schematics of the printed circuit cards and detailed 
interconnect wiring. 


7. 3 Basic Simulator Data 

After calibration of the actuators, transducers, and electronics, the DPF 
and position loops were closed. The loop parameters were the same ones 
used during the analog study, except for Kyj^ , which was inadvertently 
set too high. ( The error was discovered in the process of writing this 
report. Fortunately, subsequent measurements confirmed that lowering 
the gain to 58 sec"^ had little effect on actuator response. ) 


1 lr D 

= 33 

rad/sec 

k vd 

= 72 

-1 

sec 

K vx 

ii 

O 

sec " ^ 


The elevon frequency responses for small command inputs are shown in 
Figure 7. 6. These responses were measured directly from the potentiometer 
which senses crankshaft angular deflection^with all operating channels syn- 
chronized. By comparing these responses with the corresponding analog 
data (Figure 6. 4), several differences are apparent. First, the position- 
loop bandwidths (frequency for 90° phase lag) are lower on the simulator. 
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Number Of 
Operating Channels 


Analog 


15 Hz 


Simulator 


10 Hz 


11 Hz 


7 Hz 


7.4 


For the 4-channel case, the primary sources of additional lag are the 
servovalve dynamics, which were not included in the analog study, and 
friction in the liquid springs. For example, the servovalve contributes 
18 degrees of phase lag at 10 Hz (out of a total difference of about 25 
degrees). With only two channels operating, the phase difference at 10 Hz 
is about 50 degrees. This large difference is due to viscous damping 
contributed by the bypass solenoid valves in the shutoff channels, w ic 
present a finite restriction to the bypass flow, even in the u y open pos. 
tion. The same factors also explain the reduced peaking m the amplitude 
data. The effects of increased viscous damping in the 2-channel data are 

particularly apparent. 

Figure 7.7 shows the crankshaft response to 1“ command steps for com- 
parison with the analog data of Figure 6. 5. The servovalve dynamic, have 
caused a longer initial time delay and a somewhat slower rise time. 

Improved damping due to friction is also apparent in the 4 -channel case, 
as are the effects of solenoid valve viscous damping in the 2- channel case. 

The effects of removing the liquid springs are illustrated in Figure 7. 8. 

It is clear that damping has been reduced somewhat, due to reduced friction. 
To demonstrate the effects of rate limiting, a 2° command step is shown 
in Figure 7. 9, and a series of frequency responses are given in Figure 7. 10 
(refer to Figures 6. 7 and 6. 6 for a comparison with corresponding analog 
results). Crankshaft response data for load disturbance inputs were not 
taken becuase there is no convenient way to apply external loads to the 
crankshaft. 

Simulator Equalization - Nor mal Operation — 

After the basic servoloops were checked out, the equalization loops were 
closed. As the equalization gain pots were opened up, the ^ rvov _ alve 
torque motors would start to buzz at K yE on the order of 600 sec This 
is a problem because the desired value of K yE is 710 sec . e ua " 

tal frequency of the buzzing would abruptly change from approximately 650 Hz 
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1° P-P Response 
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FIGURE 7. 10 EFFECTS OF RATE LIMITING ON CRANKSHAFT 

FREQUENCY RESPONSE 
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to approximately 350 Hz as gain was changed slightly. The buzzing 
could be measured as a load-pressure limit cycle with a peak-to-peak 
amplitude of about 100 psi. Of course* this limit cycle would never show 
up on the crankshaft pot output, but it was certainly not doing the servo- 
valve torque motors any good. 

The first attempt at a fix was to assume that the instability was simply 
caused by the torque motor resonance. Therefore, a first-order low-pass 
filter was applied to the equalization output (break frequency at 40 Hz). 

The system would then oscillate at a loop gain of about 200 sec"l , 
at a frequency of about 40 Hz. A quick look at pressure loop 
dynamics confirmed that this behavior should not be possible. 

Finally » a combination of pressure loop measurements and 
analytical work uncovered a rather complex stability problem at fre- 
quencies well above the load resonance. The problem encountered on the 
simulator is believed to be typical of high-gain pressure loops in general, 
and a detailed analysis is therefore given in Appendix A. The outcome of 
this analysis was that the only practical solution, in the present applicationi 
is to filter the equalization output with a first-order breakpoint at 1 Hz. 
Actually, it may be desirable to filter the equalization even further to 
obtain smoother failure transients, but the 1 Hz breakpoint certainly con- 
stitutes an upper limit. 

With the equalization stability problem resolved, Ky £ was set at 710 sec - *, 
and the " worst case " offset conditions defined in Section 2. 0 were applied. 
The nulls of channels 1 and 3 were offset + 10% of full stroke, while channels 
2 and 4 were not offset. As defined in Section 7. 1, positive values of X and 
6 require a negative command voltage. Therefore, the command voltage to 
channels 1 and 3 was biased (-.10 Sp K^) = - 1, 65 v. The choice of 

channels* 1 and 3 as the offset channels wasmnade to minimize side loads on 
the crankshaft bearings. Since channels 1 and 2 were offset in the analog 
study, the reader is reminded to compare channel 2 data (analog) with 
channel 3 data (simulator), and channel 3 data (analog) with channel 2 data 
(simulator). 

When the equalization loops and offset conditions were finally set up, the 
following static data were obtained for zero command input. 
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Measured 

Output 

No 

Equalization 

MVE 

6 ~ deg 

+ 3. 1 

+ 6.2 

APj ~psi 

+ 2950 

+ 300 

AP 3 ~psi 

+ 3000 

+ 300 

AP 2 ~psi 

- 2880 

0 

AP 4 ~psi 

- 2690 

- 20 

^Pav 

+ 95 

+ 145 

Max(AP n -AP av ) 

2975 

165 

‘^P'mid 

— 

+ 300 


As in the analog study, these data show that the mid-valUe equalization 
has reduced the force fight form nearly 100% to about 5%. This degree 
of force sharing is maintained over the full output range Of the system. 
(When interpreting load pressure data from the simulator, the reader 
should bear in mind that the absolute accuracy of the measurements is 
on the order of ± 50 psi. ) 

Figure 7. 1 1 shows the crankshaft response to small comrtiand steps 
(channel 1 and 3 nulls still offset + 10%). Without equalization, the 
response is quite sluggish. The equalization removes the effects of 
interchannel mismatch effectively enough that the step response is 
virtually identical to the response with all channels perfectly synchron- 
ized (Figure 7. 7). The load pressure responses for these same step 
inputs are given in Figure 7. 12. 


7. 5 Simulator Equalization -Hardover Failures 

Numerous combinations of hardover failures, followed by manual shut offs, 
were examined to determine the most cirtical sequence. The most critical 
sequence is the same as determined in the analog study: channel No. 1 

hardover (-), No. 1 shutdown. No. 2 hardover ( + ), No. 2 shutdown 
(remember that the operational states of channels 2 and 3 were traded 
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0. Z de g /di v { ve r t ) 
0. 0Z scc/div (hor) 


N o E qu a li z at i o n. 



FIGURE 7. .1 i EFFECT OF EQUALIZATION ON CRANKSHAFT 

RESPONSE TO + 1° STEP COMMAND 
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LOAD 

PRESSURE 

l/^PSI 



FIGURE 7. 12 EFFECT OF EQUALIZATION ON LOAD PRESSURE 

RESPONSE TO + T CRANKSHAFT STEP COMMAND 
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in going from the analog study to the simulator). The hardover fax Lures 
were simulated by patching a large voltage directly into the drive amplifier, 
thereby forcing the servovalve wide open in the appropriate direction. 
Shutdown of a channel was accomplished manually with the appropriate 
mode selector switch. The resulting steady-state crankshaft deflections 
are presented in the following table. 


Crankshaft Deflection ~ Deg- 



Before 

AP 

Equalization 

Failures 

-3000 

None 

+ 3.1 

0 

MVE 

+ 6.2 

- 0.7 


No. 1 

AP 2 -+ 

No. 2 

Shutoff 

+ 3000 

Shutoff 

+ 1.5 

+ 6 . 1 

+ 3. 1 

+ 0 . 2 

+ 8.0 

+ 0. 3 


This data is very similar to the analog data of Section 6 . 3. 


The steady-state load pressure changes for this hardover sequence were 
also measured, and are as follows. Note that the mid-value pressures 
given ar-e: the values computed by the mid -value logic. 


Change 

Equal. 

APj 

AP 3 

ap 2 

AP 4 

AP mi d* 

None 

None 

+2950 

+ 3000 

-2880 

-2690 

— 

it 

MVE 

+ 300 

+ 300 

0 

- 20 

+ 300 

APj-^-3000 

None 

-3000 

+ 3000 

- 20 

+ 70 

— 

It 

MVE 

-3000 

+ 1140 

+820 

+ 850 

+850 

No. 1 Shutoff 

None 

C 

) 

+ 3000 

-1470 

-1300 

— 

it 

MVE 



+ 240 

- 70 

- 50 

- 50 

AP Z -* +3000 

None 



+600 

+ 3000 

-2950 

— 

n 

MVE 



-890 

+ 3000 

-1240 

-890 

No. 2 Shutoff 

None 



+ 3000 

0 

-2620 

— 

it 

MVE 


r 

+2 00 

0 

- 90 

- 90 


# Computed by MVE logic 
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Kft . M«MM> 

As with the analog results , this table shows that the equalization continues 
to hold force fight to minimum, even after failed channels are shut down. 
During the sequence, the failure detection thresholds were set at 5 00 psi. 

The failure indicator light in the appropriate channel came on promptly as 
each failure occurred, and it stayed lit. Throughout the sequence, there 
was not even a momentary failure indication in the unfailed channels. Of 
course, this failure detection behavior could be predicted by the foregoing 
load pressure data. 

The crankshaft transient responses for the foregoing failure sequence are 
given in Figure 7. 13. There are a number of differences between these 
transients and the analog transients of Figure 6. 13. First, all the tran- 
sients exhibit fewer oscillatory tendencies; this is due to friction and 
additional viscous damping, as discussed in Section. 7. 3. The other differ- 
ence is that the hardover transients are much slower on the simulator than 
on the analog. After studying the data, it became apparent that the differ- 
ence was due to incorrect mechanization of hardover failures on the analog 
computer. The analog failures were mechanized by suddenly sending a 
channel’s load pressure to plus or minus 3000 psi. In real life, however, 
it takes a finite time for the load pressure to change because oil must 
first flow to wind up Kg • This effect could have been accounted for if the 
analog hardovers were mechanized in the same way that they were mechan- 
ized on the simulator, i. e. introduction of a large current into the servo- 
valve. The shutoff transient data for the analog compares reasonably well 
with the simulator because sending a channel's load pressure to zero is a 
fairly accurate reproduction of the bypass solenoid valve’s function ( the 
time delay in the simulator data is the response time of the solenoid valve). 

Transient data for the same hardover sequence, but using the automatic 
shutoff feature, is given in Figure 7. 14. The small-signal crankshaft 
response to command inputs, after both channels are shut off, is shown 
in Figure 7. 15. With equalization, the response is nearly the same as 
when the two operating channels are perfectly synchronized (see Figure 7.7). 
However, with no equalization, the response is very sluggish. 
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CHANNEL # / 
HARDOVER (—) 


CHANNEL *! 
SHUTOFF 


CHANNEL # Z 
HARDOVER (+) 


CHANNEL # 2 . 
SHUT OFF 


FIGURE 7. 13 EFFECT OF EQUALIZATION ON RESPONSE 

TO A SERIES OF HARDOVER FAILURES 
AND SHUTDOWNS 


73 



MR E 1905 


MOOC INC . SMI AURORA. *0RK 


Channel fl 1 Hardover (-} 



Channel # Z Hardover {+) 


Scales ; 

lm 0 deg/div (vert) 
(middle line is +4°) 
0, 05 see/div (hor) 



FIGURE 7. 14 CRANKSHAFT RESPONSE TQ A SERIEjT 

OF HARDOVER FAILURES WITH 
AUTOMATIC SHUTDOWNS 
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Scales : 

0. 2 deg/div (vert) 
0. 02 sec/div (hor) 

No Equalization 



FIGURE 7. 15 EFFECT OF EQUALIZATION ON CRANKSHAFT 
RESPONSE TO + 1° STEP COMMAND 
(CHANNELS 1 AND 2 SHUTOFF) 


75 





MR E ^05 


7. 6 Simulator Failure Detection 


As mentioned in Section 7. 5, the failure detection logic functioned very 
satisfactorily during all hardover failures and shutdowns. However to 
more completely evaluate the logic, it was deemed necessary to also 
investigate the detectability of various failures in the equalization logic 
itself. The static crankshaft deflections for various equalization failures 
in channel 1 are shown below, for various pre-failure offsets in channels 
1 and 3. 


Failure 

| Crankshaft Deflection 

~ Deg. 

+ 10% Offset 

Zero Offset 

-10% Offset 

None 

+ 6.2 

0 

- 0. 3 

Equal, output open 

+ 6.4 

0 

- 1. 4 

Equal output hardover * 

- 0.7 

- 0.8 

+ 1.0 

AP amp. output open 

+ 1.2 

+ 1. 0 

+ 0. 7 

AP amp. output hardover # 

+ 1. 1 

- 0. 8 

+ 0. 6 

AP m id output open 

- 1. 0 

- 1. 3 

-1.4 

AP m | ( j output hardover # 

- 0.7 

- 1. 3 

+ 1.0 

AP negative feedback open 

+ 7. 5 

+ 1. 3 

+ 1.0 


* Hardover in most critical direction 


These transients are comparable with those obtained for hydraulic hard- 
overs. Notice that the values given are considerably different than the 
values obtained for similar failures on the analog computer (see Section 
6. 4). This is due to the fact that the various equalization voltages which 
are being failed are based on AP n for the analog computer, while the 
corresponding simulator voltages are based on (AP n + Pg). 

With the failure detection thresholds set at 500 psi, none of the foregoing 
equalization failures generate a false failure indication in an operating 
channel, even momentarily. The failure indicator light in the faulty 
channel (No. 1) came on promptly with most of the failures, and it stayed 
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I 

lit. However, there are two types of failures which do not result in a ; 

positive failure indication. The first is when the equalization output goes 

open. With the offsets of channels 1 and 3 initially + 10% or zero, no 

failure indication occurs -at all. This is no great problem since the 

failure is passive in these cases { the equalization output was near zero i 

to begin with). As soon as equalization is required in the failed channel, 

a failure indication results. The second problem occurs when the A? mid 

output goes open. In this case, no failure indication is given statically, 

but a momentary indication occurs during the failure transient, which is { 

sufficient to shut off the channel if the mode selector switch is in the AUTO 

position. Also, any subsequent rapid command input will generate a 

momentary failure indication in the faulty channel. , 

i 

On the basis of the failures examined to date, it appears that the MVE 
provides a simple and reasonably positive method for identifying failures. 
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8. 0 CONCLUDING REMARKS 

The feasibility of obtaining a high degree of force sharing in parallel high- 
stiffness s ervoactuator s , without the use of secondary actuators, has been 
clearly demonstrated. The major advantages of the equalization scheme 
described in this report are as follows. 

m A very high degree of force sharing is attainable, without degrading 
system response or output stiffness. 

• It is not necessary that the individual channels be physically located 
close together. 

• Because the system is an all-active type* it is inherently fail- 
operative after the first failure, even in the absence of detection/ 
correction logic. 

• The failure detection/correction logic is relatively simple and gives 
positive indications for a wide range of failure types, including 
transducer failures. 

• Since the equalization is mechanized electronically, the mechanical 
hardware is of minimal complexity. The additional electronics 
required by the equalization are quite straightforward. 

The primary disadvantage of the system is that the main pistons must be 
oversized unless reduced force output capability is acceptable when failed 
channels are shut off. In contrast, a system employing secondary actuators 
retains full force output capability as channels are shut off. The oversized 
pistons may more than offset the weight saved by deleting the secondary 
actuators. 

With regard to the possibility of common failure modes, it is not clear to 
the author whether the inter channel mechanical connections of the secondary 
actuator approach or the electrical interchannel connections of the proposed 
approach are inherently more reliable. What is clear is that arguments on 
the subject could easily go on forever. As is usually the case, the relative 
merits of the available approaches must be evaluated for each specific 
application. 
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APPENDIX A: ANALYSIS OF PRESSURE LOOP STABILITY 


The equalization stability problem described in Section 7. 4 was first attacked 
by looking at basic pressure loop dynamics. To simplify both analysis and 
measurements, it is convenient to consider the case of only one actuator 
connected to the load (the other 3 actuators and the liquid springs disconnected 
from the crankshaft). Since the stability problem occurs at frequencies well 
above the load resonance, this simplification should not appreciably affect the 
results. 

The basic pressure loop dynamics can be readily obtained from Figure 5. 2 
by neglecting KpQ, Kl»F2» E 3, F4, Fj}> and non-linearities. Consid- 

ering the equalization as a simple proportional feedback, the equalization 
loop of Figure 5. 2 can be rearranged as in Figure A-l. 



FIGURE A-l BASIC PRESSURE LOOP DYNAMICS 
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Closing the inner loops, the forward loop becomes: 



Actually, the poles have some damping due to K pQ and friction, but the high 
frequency behavior is of primary interest. At frequencies well above 
the pressure loop transfer function looks like an integrator. 



This loop cannot be driven unstable, even at infinite gain. Even if the servo- 
valve dynamics are considered, loop gains (K yE ) in excess of 4000 sec 
should be possible. 

At this point, detailed frequency response measurements were made for each 
actuator (with the others disconnected from the crankshaft) by putting a signa 
into the drive amplifier and looking at the output of the AP amplifier. The 
oscilloscope patterns were rather poor, especially for small input signals. 
However, by using an oscilloscope and a frequency analyzer, credible data 
was obtained for a drive signal equivalent to 5. 0 ma (P-P). The data showed 
much higher amplitude at high frequencies than was expected. This suggested 
the possibility of structural modes. 

The most obvious structural mode is the mass of the actuator body suspended 
between K A and K g . This can be modelled as in Figure A-2. 
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Developing the dynamic equations for this model, as was done for s ^“ pler 
model in Section 5. 2, it is seen that the only change is in the relationsh p 

between X, Xj^, and AP. 

Fg = -(X L - X) K S 

AAP = F = Fg - M^S 2 (X L - X ) = + Kg) (X - x l) 

X = X T + f AAP 


+ Kg 


Thus, the block diagram of Figure A-l is modified S 

term with [a/(M a S 2 + KgQ . When this is done an l the nmex 
rlnfied the forward-loop transfer function becomes fourth-order, maxi g 
S Lt ,h, U- •" well-sepa,a‘«d, th. t™rt« «'»” =■" 

be approximately factored, with the following result. 


AP 


IKdaKq>($=) s 

(ma) s 2 + 1 

— ~r 

. 

s 2 + 1 

n 

7ma ) S 2 + 1 

A K V J 



Where 


M A 


M* l = m l fl + 

V iV1 L J 

rt) (‘ 


k 'a = K A 


iil 

M, 


-) 


At frequencies above the load resonance, the pressure loop characteristics 
are: 


GqL = 


K 


VE 

1 + 

My 


1 


S Z + 1 


a 


m a \ 

K 's ) 


S 2 + 1 


Thus, the primary effect of the actuator mass is to add a complex pole-zero 
combination. Of course, these terms will actually have finite damping. 
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The value of M« was determined from the natural frequency of the complex 
Ires. which show up very clearly in the data a. a -harp mverted peak 

natural frequency is 40 Hz. which yields M A - K s /( l " ) 

m 2^-n t! is approximately ten times the mass of the actuators 
lb-sec /in. Th PP ' that the leaf springs themselves contrite- 

themselves. The reason x < * ulation confirms that 

the value measured m Se . .. the freauency was varied 

ih - - 

t° Obtain a Structural mode is clearly evident in the data. Without trying 
least ° e source of this mode, another complex pole-zero com- 

to ascertain the > exact s function. By including servovalve dynamics 

r^rg^^^cies and damping ratios rf*. structural 
modes! the following complete transfer function was obtained. 


g ol - 



G 1 = 


G 2 = 


g L G 1 G 2 G SV 


, K VE ) s 
492 0 ) 

— 


7 

S 1 

^.2(0-03) _ s + 1 



2 It (10. 6) ; 

1 2 TT {10. 6) _J 



7 S ) 

2 2(0. 20L q + , n 



\Z if (40 ) 

2 IT (40) 



/ S \ 

2 + 2(0. 40) q + 1 



(2 1T(120) t 

2 it (12 0) _ 


— 

( S 

\ 2 + 2(0. 30) S + 

.1 


\z tr(i60) 

/ 2 JT( 160) 1 


/ s 

.2 2(0. 30) s + 

1 


{ 2 ff ( 300) 

/ 2tr(300) J 


Load 

Dynamics 


First 

Structural 

Mode 


Second 

Structural 

Mode 
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r* — 


1 

U SV “ 


5 ^ 

!7 S \ 2 + 2(0. 50) r 



2 ff (45) 

\2 IT (1000)) ' 2 TT (1000) 




/ 


Servovalve 

Dynamics 


A Bode plot of this open-loop transfer function is shown in Figure. A- 3 for 
a loop gain of 100 sec" 1 . Also shown in the figure are the measured data from 
the most representative actuator (channel 3), It is apparent that the curve fit 
is quite good for frequencies up to about 400 Hz. Above this value, the data 
is of questionable accuracy and servovalve resonant modes begin to appear 
(the latter are not adequately accounted for in G g y). 


Figure A-3 makes it clear why there is a pressure loop stability problem. 

As mentioned in Section 7. 4, a limit cycle appeared at loop gams of about 
6 00 sec with a frequency which abruptly changed from approximately 650 
Hz to 35 0 Hz as gain was changed slightly. The computed curves of Figure 
A-3 show 180 degrees of phase lag at 500 Hz and a gain margin of 18 dB, 
thereby predicting instability at Kyg = 800 sec” . The experimental data 
suggest that instabilities could occur at either 400 Hz or 650 Hz at Ky^; 
between 500 and 800 sec" 1 (data from Channel 2 shows that the phase lag 
actually reaches 180 degrees at 400 Hz). 

Since the trends indicated by Figure A-3 seemed well supported both analy- 
tically and experimentally, a cure for the problem was obvious: roll off the 

high-frequency amplitude with a low-pass filter. Accordingly, a first-order 
lag at 40 Hz was added to the feedback. Unfortunately, this change caused 
instability to occur at loop gains as low as 2 00 sec . The only possible 
explanation for this behavior is that the pressure loop characteristics must 
be substantially different at very low amplitudes than those shown in Figure 
A-3. An attempt was made to repeat the data of Figure A-3 at drive signal 
amplitudes comparable to those observed during the 40 Hz limit cycles 
( i = 0. 7 ma P-P). The oscilloscope patterns are terrible at this amplitude, 
but there is a tendency for the phase lag to steadily increase from 90 degrees 
near 25 Hz to 180 degrees near 100 Hz. This is a marked contrast to the 
higher amplitude data. 


The most likely explanation for the low— emplitude characteristics is that the 
load pressures are insufficient to overcome actuator seal friction, and the 
piston is virtually locked in its bore. With X = 0, Figure A-l indicates that 
the pressure-loop transfer function changes to: 


'OL, 


K 


E 


/ K DA Kq K A j 
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A Bode plot of this transfer function, with servovalve dynamics added, is 
shown in Figure A-4 for K V E = 100 sec" 1 . Note that the plot only applies 
for frequencies appreciably above the load resonance, because frequencies 
near the load resonance cause the piston to break free, even at low drive 
amplitudes. The Bode plot of Figure A-3 is reproduced for comparison. 

The comparison shows that the piston-locked case has a larger gain margin 
than the piston-free case. This means that instability will first occur at 
the larger amplitudes. However, the 40 Hz lag which improves piston-free 
stability, substantially degrades piston-locked stability, as is shown m 
Figure A-5. This figure shows that piston-locked instability can occur for 
K v - fr » 100 sec** 1 at a frequency of 40 Hz. Considering the fact that the servo- 
valve is operating near its null region, this represents reasonable correlation 
with the measured values of 2 00 sec 1 and 40 Hz. 

The foregoing discussion makes it clear that the use of electronic compen- 
sation to achieve higher loop gain is of limited value. The dilemma is that 
lag compensation is needed to improve piston-free stability, while lead 
compensation is needed in the piston-locked case. The entire situation is 
complicated by the fact that the foregoing analysis applies to stability near 
zero crankshaft deflection. As the crankshaft is deflected to large angles, 
instability occurs at much lower loop gains (350 sec’ or lower in some 
cases). This is probably due to the fact that the oil spring is greatly stiffened 
with the piston nearly bottomed, causing the piston-locked Bode amplitude to 
be increased. 

In view of the complex stability situation at high frequencies, the only prac- 
tical solution to the problem seemed to be the use of lag filtering at frequencies 
substantially below the load resonance, so that high static loop gams could be 
achieved with modest high-frequency gains. Using a first-order lag, the highest 
corner frequency, for which K VE = 710 sec" 1 could be comfortably obtained, 

was 1. 0 Hz, 

The use of low-frequency lag filtering in an equalization loop is very satis- 
factory, because the primary purpose of the loop is to equalize interchannel 
mismatch, which generally developes over a period of time. For other high- 
gain pressure loop applications, this type of filtering may not be satisfactory. 

In some cases, high-frequency compensation may help considerably. Thus, 
it would appear that both piston-free and piston-locked stability should be 
analyzed in any high -gain pressure loop application. 
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APPENDIX B: OPERATING INSTRUCTIONS FOR THE SIMULATOR 


The purpose of this appendix is to acquaint the reader with the basic operation 
of the simulator, as well as provide adjustment and calibration procedures. 


B - 1 Mechanical and Hydraulic Adjustments 


There are two basic adjustments which can be made to the liquid springs. 

The sliding collars should be adjusted so that they are barely snug against 
the crankshaft fittings, and so that the pendulum hangs straight down. 

This should be done with all four actuators bypassed (or disconnected), 
and the spring charge pressures should be at least 100 psi to ensure that 
both rods are fully extended. The second adjustment is the charge pressure 
itself, which should be checked on a daily basis unless the room tempera- 
ture is uniform 24 hours a day. The recommended charge pressure is 
18 0 psi, which represents about 2 50 pounds of breakout force reflected 
to the actuator crank arm. This can be indirectly measured by observing 
the AP amplifier output required for a single actuator to break out the 
liquid spring ( roughly 50 psi or 50 mv recommended). If the preload needs 
adjustment, it can be accomplished by applying a grease gun to the fitting 
at the base of each spring. The proper fluid is Dow-Corning 200 (1000 C. S. ). 
Note that the spring rates can be cut in half by interconnecting the springs 
with a length of hydraulic hose, or an arbitrary reduction in rate can be 
accomplished by using accumulators. 

The leaf springs also have two basic adjustments* The spring rate is 
adjusted by moving the actuator attach fitting in the slot (the proper bolt 
torque is 70 foot-pounds, after lubricating the threads and bearing surfaces 
with Molycote). The rate varies inversely as the cube of the spring length. 
The spring attach bolts can then be loosened to move the springs so that 
the actuator centerlines remain perpendicular to the springs (bolt torque 
is critical here 5 300 foot-pounds after lubrication). 

Both crankshaft bearings should be greased and adjusted periodically. 

One bearing is an expansion type, the other is not. Adjustment instructions 
are printed on each bearing. It is also important to keep Molycote on all 
bolts carrying bearing loads (both ends of actuators and liquid springs), 
so that fretting corrosion does not occur. 
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The cross-port relief valves should ideally be set so that they crack at 
32 00 psi and reseal at 2900 psi. In practice* however> this is rather 
difficult to achieve. The procedure is to give each servovalve a hard- 
over signal, then vary the supply pressure until the valves crack and 
reseal (repeat with servovalves hardover in opposite direction). Deter- 
mination of when a valve is cracked is usually made by listening for valve 
chatter, but this is not dependable. Monitoring the AP amplifier output 
is helpful. 

Physical dimensions and assembly details of the simulator fixture can be 
obtained from Moog Drawing T-18324 (12 sheets). 



B-2 Electronic Functional Details 


A brief functional description of the simulator electronics was given in 
Section 7.2, using the functional schematic of Figure 7. 4. To provide a 
more complete description of the electronics, the schematics of Figures 
B-l through B-4 were generated. Figures B-2 through B-4 show the 
circuits for each printed circuit card. Figure B-l gives detailed inter- 
connect wiring, including all connections to the various jacks, pots, switches 
and lights on the front panel. 

All operator controls and adjustments are on the front panel of the elec- 
tronics rack, as shown in Figure 7. 5. The top section of the panel covers 
the front of the card rack, and the holes are for screwdriver adjustment 
of trim pots mounted on the printed circuit cards. These pots are used 
for balancing the various operational amplifiers, setting the DPF gain, and 
setting the maximum servovalve current for each channel. Four calibrated 
pots for each channel are mounted in the section immediately below. These 
are for setting parameters which are more frequently changed, namely 
position loop gain, position null offset (for introduction of interchannel mis- 
match), equalization loop gain, and failure detection threshold. Adjustment 
procedures for all the pots are given in Section B-3. 

Adjacent to the four calibrated pots are a mode selector switch and a failure 
indicator, the operation of which is explained in section 7, 2. The banana 
jacks around the mode switch are simply connected to an uncommitted set 
of mode switch contacts. These can be patched so that an auxiliary function 
is switched when a channel is shut off or engaged, e. g. to trigger an 
oscilloscope. 
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NOTES: 

L ALL RESISTORS ARE \% UNLESS OTHERWISE SPECIFIED. 

2.. THIS CARD IS IDENTICAL IN ALL 4 CHANNELS 
(CARD NUMBERS l,5,S, 13 IN 82X484 RACK) 
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THIS. IS THE SCHEMATIC FOR CHANNEL NO. 1 (CARD NO. 3 IN 
THE 82 X 484 ELECTRONICS RACK). CHANNELS 2. 3 ( 4 
(CARDS 7. U. 15) ARE IDENTICAL, EXCEPT FOR NOTES 3 AND A 

PINS 7, 8, 17, T8 ARE CONNECTED AS SHOWN FOR CHANNELS 
l AND 2 (CARDS 3 AND 7). ON CHANNaS 3 AND 4 
(CART) S 11 AND 15), PINS 7/8 TIE INTO A3 INSTEAD OF Al, 
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(CARD 3). FOR CHANNa 2 (CARD 71, PIN 10 IS JUMPERED TO 
PIN 2, INSTEAD OF PIN 1. FOR CHANNa 3. (CARD 111, PIN 10 
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The patch panel for each channel should be relatively self-explanatory, 
with amplifier outputs generally blue and inputs generally green. Care 
should be taken to ensure that amplifier outputs are never patched to a 
stiff source, such as ± 12 volts or ground. All equalization interconnect 
jacks are orange, and the yellow jacks provide internal access to the mid- 
value logic (MVL), The jack labelled “FAIL DETECT BAL“ can be moni- 
tored while the failure detection balance pot is adjusted. Exactly how each 
jack is connected into the electronics can be ascertained from Figure B-l. 
The jacks labelled "POS COM" on all four channels are tied together and 
connected to the wiper of the switch labelled "POSITION COMMAND". 

When the switch poles are patched to the two command pots with shorting 
plugs, a common position command signal can be sent to all four channels 
and rapidly switched between two values. An auxiliary set of switch con- 
tacts can be used to trigger an oscilloscope. By removing the command 
shorting plugs, a common external command signal can be introduced, e. g. 
from a function generator. Of course, the command pots can also be used 
to generate arbitrary reference voltages for other purposes. 

The +12, common, and -12 jacks are directly connected to the regulated 
power supply. The jack labelled "LOAD POSITION" is directly connected 
to the wiper of the crankshaft position pot. At the extreme lower right of 
the front panel is a spare switch, which can be patched for functions such 
as abruptly switching from normal operation to a hardover failure con- 
dition at any point in the electronics. 


B-3 Electronic Calibration Procedures 

The most fundamental electronic adjustment is to set the various balance 
pots. Because many of the amplifiers to be balanced are m series, it is 
usually wise to adjust all the balance pots at one time, following an orderly 
procedure. The appropriate initial conditions are as follows. 

(1) Turn on the hydraulic power supply and exercise the actuators 
to remove trapped air. 

(2) Turn all mode switches to "SO", making sure that the crankshaft 
has stopped in the desired "zero" position. If the liquid springs 
are connected, they will probably drive the crankshaft to a 
repeatable "zero" position when all actuators are bypassed. The 
crankshaft pot can then be mechanically nulled. 
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Disconnect the position command pots and ground the position 
command input. 

The primary patch panel for each channel should have shorting 
plugs in their normal locations, except the three plugs whic 
supply the inputs to the summing amplifier. These three p 
should be grounded. 

The DPF gains, position gains, equalization gains, current limits, 
and failure thresholds should all be set at their maximum values 
(fully clockwise), or at the settings to actually be used during 

simulation. 

The position offset pots should all be set at 500 (mid range). 


Mow the following balance adji^junents can be made. 


( 1 ) 

(2) 


Position Balance: output's of all position amplifiers set to zero 

AP Balance: outputs of all AP amplifiers set to + 3. 24 volts. 

(3) DPF Balance: outputs of all DPF amplifiers set to zero. 

(4) 


Equalization Balance: outputs of all equalization logic modules 

set to zero. 


(5) 


Failure Detect Balance: "FAIL DETECT BAD" outputs all set 

to zero. 


(6) Summing Amplifier Balance: all servovalve drive currents set 

to zero. Zero servovalve current is achieved when the voltage, 
on pin 8 of the drive amplifier cards are zero (cards , , , )• 

alibration data for the various transducers were obtained and the 
llowing relationships developed. 

• Crankshaft pot output: 0. 07 v/deg, positive for positive 
crankshaft deflection, zero adjusted mechanically. 

• Actuator pot output: 2. 15 v/in, positive for positive crank- 
shaft deflection, zero adjusted with position amplifier balance. 

AP amplifier output: e = . 00108 (AP + 3000), zero set 

r ..... r . ~ — x 7. 7 A at A M — !). 


^ — — - A. 

adhistinf? AP amplifier balance for 
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In addition, the velocity gain of each actuator was measured by dis- 
connecting the actuators from the crankshaft and removing the shot g 
plug between the summing amplifier and drive amplifier. Step voltages 
of ±2. 0 volts were then put into the drive amplifier, and the output o 
the actuator feedback pot was recorded on an X-Y plotter(this input 
represents about 1. 7 ma of valve current, out of a maximum limit a. 

3. 0 ma). The average combined velocity gain of the actuator and dri e 
amplifier was measured to be 0. 90 in/sec per volt. 

The various loop gains were set by using the above measurements and 
K T = 34, 900 lb /in ( based on K A = 193, 000 and Kg measured to be 42^600 ). 

The appropriate amplifier gains can then be computed from the following 
equations. Note that the summing amplifier gam is different for ea 
loop (10. 0 for position, 11. 8 for DPF, and 49. 8 for equalization ). 


Kyx - K pOT k pos k sum 


( k drive k q /A) 19, 3 K POS 


k vd “ k ap k dpf k sum t k drive 


K / A ) ( K x / A ) = 80K DpF 


K 


VE 


= k Ap k eq k sum ( k drive k q 


/ a )( K t / A ) = 340 K eQ 


V JLj — 

For the position loop gain of 40 sec' 1 used in the simulation, the required 
position amplifier gain was 2. 09 v/v ( gain pot setting of 5l * . 
scale is 000 to 1000 ). For the DPF gain of 72 sec used, the DPF 
amplifier gain was 0. 90 v/v ( note that this is the high frequency gam - 
the 0 33uF DPF capacitor must be shorted when setting the gain ). e 
equalization amplifier gain was 2. 08 v/v to obtain an equalization loop 
gain of 710 sec' 1 ( gain pot setting of 450 required ). 

T , failure threshold can be set by removing the shorting plugs on the 
yellow jacks labelled "A 5 P„ INPUT” and "A5 MV INPUT". If the right- 
hand "A5 MV INPUT" jack is grounded in each channel and the appropria e 
voRage is applied to the right-hand "A5 P n INPUT" jack, the threshold 
pot can be adjusted until the failure indicator just barely lights. The 
appropriate input voltage is 1. 08 volts to achieve a threshold of (AP n - 
Ap A = lOOOpsi. For the present simulation, the threshold pots were 
set™ 475 to achieve a threshold of ± 500 psi (with the equalization gam 

pots set at 450). 
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The easiest way to obtain a given position null offset in a channel is 
to input a command voltage of the desired magnitude but opposite sign* and 
adjust the position offset pot until the output of the position amplifier is 
zero (transducer input voltage grounded)* Full actuator stroke (7.66 inches) 
requires a command signal change of 16« 5 volts. 

Changes to the DPF time constant must be made by changing amplifier 
components. The time constant can be changed by replacing the capacitor, 
without affecting loop gains. If the resistors are changed instead, the 
ratio of feedback resistance to input resistance should be preserved if 
loop gain is not to be affected. 

The current limit pots can be set by putting ± 1Z volts into the drive 
amplifiers (after removing the shorting plugs, of course), and measuring 
the voltage on pin 8 of the drive amplifier cards. The conversion factor 
is 2 0 millivolts for 1.0 mi Hi amp. 
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